Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
0
votes
0answers
64 views

How do I figure out whether this is a bug or how do I debug what is trying to access my webcam?

Similar question, which has a different question (since my AV doesn't even know the process ID or similar): Antivirus warns about processes trying to access my webcam I am using ESET Internet Security ...
2
votes
1answer
79 views

Kinsing Malware entering via compromised Dockerhub Images?

I got a server infected with the Kinsing malware, which mines crypto on your server, maxing out your CPUs. The malware initially creates the files /tmp/kdevtmpfs and /tmp/kinsing If you delete these ...
0
votes
0answers
17 views

Infection from website [duplicate]

I wanted to learn more about keyloggers and how to protect myself from them. I clicked on a result from google, but the site seems to be infected. Link to Sucuri results Do I need to reinstall my ...
0
votes
1answer
59 views

Could video streaming pose a security threat?

lately I have wondered if through video streaming you could get infected by some type of malware, can it be possible? I have two cases I would like to consider, lets say I stream a video that was ...
0
votes
1answer
41 views

Odd Kerberos Hosts After HD Wipe, and fresh OS re-install

After reformatting my hard disk and rebuilding/re-installing the latest macOS operating system, I found the following IP addresses after running Kerberos.internal.com: kerberos.internal.com has ...
0
votes
0answers
36 views

Is it dangerous to run malware in DOSBox? [closed]

I made a DOS malware in Assembly and here is the code of my malware: org 100h file db "*.*", 00h mov ah, 4Eh loop: mov dx, si int 21h mov ax, 3D01h mov dx, 9Eh int 21h ...
0
votes
1answer
57 views

DNS local cache spoofing with malware or RAT

I was learning networking and knew that browsers don't have algorithms to convert domain names to IPs. It queries a DNS server. After that, the computer remembers the IP, so next time the domain is ...
0
votes
0answers
53 views

Microsoft Outlook “confirm your current password” scam? [closed]

I continue to have this pop-up preventing me from accessing my email (the first pop-up said in all lowercase "don't lose access to your account!"). It seems unprofessional to be all ...
-1
votes
1answer
68 views

Is it possible to change the string of EICAR file? [closed]

Is it possible to change the string of EICAR file and still detectable? For example, print "KGMAL" instead of "EICAR".
0
votes
1answer
127 views

How to verify there is no malicious code in an opensource library?

I am planning to use an opensource library to my project instead of developing from scratch. How can I verify there is no malicious code in the library or someone cannot access my files? Currently ...
1
vote
1answer
85 views

Has exploitation been demonstrated against the fundamental constructs of the debugging process?

I'm curious to know if an attacker can fundamentally exploit the debugging process. I'm not asking if specific debugging tools have been exploitable, surely some have, but rather whether the process ...
0
votes
0answers
46 views

Ad popups showing on personal website deployed on VPS

I have a Spring-MVC webapp deployed on a Hostinger VPS server (OS: Ubuntu 18.04, Apache2 + Tomcat servers). For some reason, every now and then, clicking on random regions within the web pages of my ...
1
vote
1answer
105 views

Is there a way to record CPU operations for a given process as they occur in a standard, production OS environment?

Doing malware analysis I'm interested in being able to log every instruction the CPU executes for a given process. I was hoping this was perhaps possible in a standard VM environment, even if not ...
0
votes
1answer
57 views

Difference between a RAT and a hVNC

What is the difference between a Remote Access Trojan and a hidden Virtual Network Computing? It seems that both software allows a hacker to access a victim's computer and to spy on activity.
0
votes
1answer
98 views

Haven't updated my Windows 10 for more than a year

Almost a year ago, I dual-booted Windows 10 and Linux Mint. And since then, I haven't booted into my Windows 10 OS. I still remember that the Wi-Fi adapter was off when I shut my Windows 10 down. Now, ...
0
votes
1answer
87 views

Is it possible for a compressed file to contain malicious code?

I recently downloaded 2 compressed files (.zip and .rar) from a really unreliable and untrusted source while using a browser integrated VPN. My antivirus didn't notice anything but I am curious if it ...
0
votes
1answer
80 views

Can a video file contain code that shares your identity? [duplicate]

Could a video file contain code that reveals and sends your ip/mac address or give access to personal files to somebody else? Would normal video players (like VLC) be able to notice that kind of ...
1
vote
2answers
128 views

How to securely create a bootable USB drive from a possibly infected system?

I'm not sure about my system so I want to completely wipe my HDD and reinstall Windows 10. But I realized that an infected system can also infect a USB bootable drive. Unfortunately, I don't have ...
-1
votes
2answers
186 views

Is it possible for someone to spy on an Android phone without using spying apps?

Can a “bad guy” spy on an android phone without installing spy apps (those apps that require payment)? By “spying”, I mean using key logger, screenshots, read messages and so on. Is it possible to spy ...
0
votes
2answers
111 views

How does a browser stop malware from executing? [duplicate]

When it comes to infections with viruses, in almost all cases the initial infection requires some sort of user interaction - apart from those cases where a plug-in has some sort of security flaw which ...
0
votes
0answers
26 views

how to check a device (mouse, USB-VGA, USB-HDMI) contains no malware [duplicate]

I got my fingers seriously burnt with some garbage bought online, which was a USB-3.0 to VGA cable. It contained a driver that requested an install, that led to my computer being unstable and a few ...
0
votes
0answers
65 views

Dangers of switching sim from old phone to new one

I would like to know the dangers of switching an old sim card from an old phone to a new one. I recently got a new phone and a paranoia woke in me. Lets assume that the old phone was infected with ...
1
vote
1answer
121 views

Is it still possible to get a virus simply by visiting a website? [closed]

I know this is a duplicate question, but there aren't any recent updates on the answers given to this question(here and here) and after a few years, I'm sure browser security has improved drastically. ...
0
votes
1answer
58 views

Will a virus/malware travel between devices when logged into the same Google account

If my laptop/desktop got infected with malware or some kind of a virus, will it be safe to log in the account on my laptop to my new PC or will it spread to it because I used the same account for new ...
1
vote
1answer
49 views

Obfuscating android malware [closed]

I am exploring android malware forensics and am trying out payload generation and delivery, while also trying obfuscation. I have used commercial tools, e.g. ProGuard and also open sourced tools, eg. ...
0
votes
0answers
77 views

How does PUA:Win32/InstallCore get on my PC?

I run a full (not quick) scan of Windows Defender every night. Somehow, between two nights ago and last night an instance of PUA:Win32/InstallCore got placed on my PC. Windows Defender removed it, ...
4
votes
1answer
146 views

Is Sleep mode safe?

If a PC has rootkit, when it goes into sleep mode, can rootkit do anything to it while it’s in state of sleeping? Meaning steal data, open programs and basically do anything. Assuming it’s not BIOS ...
13
votes
5answers
6k views

Why are there more research papers on Android malware than iOS malware?

Based on this question. Why are there more research papers on Android malware than iOS malware?
0
votes
0answers
26 views

How safe and practical is torrenting? [duplicate]

From my understanding, torrenting differs from standard downloading because it will get pieces of the file from other torrent clients, making it faster (and decentralized if I'm not wrong). How safe ...
0
votes
1answer
427 views

Why don't researchers care about iOS malware? [closed]

I see Android malware being mentioned when reading peer reviewed papers about malware detection for smartphones, but iOS is never mentioned. Even Malwarebytes says: Historically, iOS has never been ...
1
vote
0answers
65 views

Android System Update Spyware Can Steal Your Photos, Money, Record Calls and Track You Too. What to do if this happens? [closed]

I came across this website and suddenly I got worried. What worries me is apart from the system update threat mentioned I have been visiting so many sites, clicked on pop-ups, downloaded apps from ...
0
votes
0answers
69 views

Sending meaningless Addresses requests to a series of malicious IPs

i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/ the request ...
0
votes
1answer
68 views

Changing Linux system files by malware from another OS. Is it possible?

Is it possible to infect important Linux system files with a malware from another operating system? For example, you are using Windows, you have a disk with the Debian operating system connected. You &...
0
votes
0answers
39 views

ThinkPHP show my website as the req.host - did the request really come from my web server?

I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4 , for example: /public/index.php?s=...
0
votes
2answers
180 views

I clicked on a grabify link and I don't know if it installed a virus [duplicate]

I was in a discord recently and someone sent a grabify link. I clicked on it and it led me to a soundcloud page. I think my firewall on my router is alright, is that enough to prevent them from doing ...
1
vote
1answer
167 views

Can I get malware from a .rar file without opening it in Android?

I was on a group with almost 200k people on it in Telegram. One of these members (probably new, his account is now deleted) sent me (and to other people too) a file named "Customer deposit H.rar&...
4
votes
3answers
700 views

Is Firefox's new JavaScript support within PDF files a security concern?

Historically, we have learned that many security vulnerabilities and exploits have resulted from allowing document files to contain executable code, whether it be JavaScript, VBScript, another ...
0
votes
0answers
53 views

Using PEframe tool to find indicators of compromise

I try to find some indicators of compromise through the PEframe tool. Firstly, by using the volatility tool, I found out that there is a DLL file that is malicious. I checked it with the help of Virus ...
1
vote
0answers
69 views

Detecting and understanding malware/spyware [closed]

Recently, stumbled upon the new FB 500m+ leak and decided to satisfy my curiosity and poke around. Basically just wanted to see how 500m+ user records were kept and what info was released( it was ...
1
vote
1answer
96 views

What's the point of Empire if all payloads get flagged?

I've been reading about how powerful frameworks such as Empire and Metasploit are but I'm confused about something. Say I gain access through a custom reverse-shell which I self-coded (so it bypasses ...
0
votes
2answers
80 views

What could re-enable uPnP on router apart from malware?

I'm the sole person who has access to this router. I turned uPnP off and have twice found it turned back on in recent weeks. The Router is Asus DSL-AC68U. I have a VPN running at the router level, ...
0
votes
1answer
164 views

Check USB mouse for malicious code

When I first used this mouse and keyboard, my PC died shortly after. Today I used it and it somehow corrupted my Linux. I once put a clean Linux on a laptop and plugged this mouse in and left it, ...
0
votes
0answers
22 views

Is it ok to give out IP address to web developer [duplicate]

I’m currently working with web developer and he ask for IP address. Is it ok for me to send or is he trying to give me a virus or something
0
votes
1answer
200 views

I clicked on a grabify link. What can someone do with my IP? [duplicate]

I clicked on a link in discord not knowing it was a grabify link. I understand that an IP only gives your general location but what else can someone do with my IP? Can they find a way to access my ...
1
vote
0answers
37 views

watch-video.net malware and preventing these types of infections at the network level [closed]

How does a computer get infected with watch-video.net malware, and why aren't popular tools like windows defender or malwarebytes able to detect and remove it? Is there a practical way to prevent ...
2
votes
1answer
1k views

How to replace certain backup files on a website every 30 minutes? [closed]

I have a website built with WordPress, unfortunately somebody hacked it several times, deleted my adsense code and put his own adsense. I tried many security techniques, changed database name, did ...
1
vote
0answers
62 views

Do modern video game consoles sandbox games? [closed]

If for example there is a game, that is specifically designed to try to get control of your game console or to be able to provide the user of the game control over their system and somehow got onto ...
1
vote
1answer
109 views

Are emulators isolated from the host for malware testing?

I know that virtualization is different from emulation; I was wondering if emulation is isolated from its host and any destruction on it will not affect the host as if it were a virtual machine. I ...
0
votes
0answers
41 views

Wondering if a USB dongle for gaming controller could have malware installed [duplicate]

I purchased a usb gaming controller used. It has a usb dongle that plugs into the PC and a I assume its bluetooth. Is it possible for the USB dongle to contain a keylogger that starts up when I plug ...
1
vote
2answers
179 views

Embedding malicious code into an exe

How does malware usually embed into / infect exe files? (As in actually modifying the file on disk, not in memory). I've read it may look for gaps in the code section, insert its code, then redirect ...

1
2 3 4 5
46